Closed davidruffner closed 6 years ago
After taking a look at the Guide to Securing your Github Pages Site with HTTPS, I learned that there is no HTTPS support for Github Pages, under a custom domain. Below is a screenshot of a relevant subsection in the doc
@Sun-Wukong Thanks Jason for looking into this. Yeah unfortunately they do not support fully secure websites. But it looks like you can use Cloudflare to provide some security benefits.
This post described it pretty well:
It’s important to note that this setup is not fully secure — the connection between CloudFlare and GitHub pages is not secured. Since GitHub doesn’t have a SSL certificate for your domain, Full SSL is not possible with a custom domain. However, this setup does provide some protection your users (e.g. from the hacker on the same unsecured Wi-Fi network), and it allows your site to behave as if it has SSL (e.g. for web crawlers, APIs).
I followed that post and a guide from Cloudflare to setup at least partial ssl for the website. It's propagating now...
Ah, that's still pretty helpful @davidruffner. The SSL setup via Cloudflare would definitely help out with SEO. I was able to get a PDF report of an HTTPS test, and it was a success! I'll update this with a link to the test results
Permission to close #30, @davidruffner ?
Yup, go ahead! Thanks Jason!
On Mon, Jun 11, 2018 at 10:13 AM Jason notifications@github.com wrote:
Permission to close #30 https://github.com/Code4Newark/codefornewark.org/issues/30, @davidruffner https://github.com/davidruffner ?
— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/Code4Newark/codefornewark.org/issues/30#issuecomment-396257789, or mute the thread https://github.com/notifications/unsubscribe-auth/AGW3PPwuoG7SHAJZEU_xUdTfz0GCbf7Gks5t7nr_gaJpZM4SrawY .
Make sure to update links in site to https